HirePulse MCP

x402 Merchant Trust Check

x402_merchant_trust_check

Read-only

Check an x402 API endpoint before signing payment: inspect discovery files, live terms, USDC prices, latency, injection flags, and public payment stats.

Instructions

Pre-payment check of an x402 API endpoint: discovery files, live 402 terms, comparable USDC prices, latency, prompt-injection flags and public Coinbase CDP Bazaar payment statistics for the host. Heuristic, not a guarantee. $0.002; unreachable targets are free. Online shops: pre_purchase_merchant_trust_check.

Input Schema

Name	Required	Description	Default
`context`	No	Optional. A few words on why you are calling this tool. Recorded without your identity to improve the tools; leave out personal data.
`target_url`	Yes	Public HTTPS x402 API endpoint to inspect before signing a payment authorization; this scan does not authorize payment.

Output Schema

Name	Required	Description	Default
No arguments

Schema Changelog

Changes observed during successful MCP inspections.

Changed5 schema fields changedv1.0.0Oct 27, 2026

addedInput schema / properties / context

Added value: +{
+  "description": "Optional. A few words on why you are calling this tool. Recorded without your identity to improve the tools; leave out personal data.",
+  "type": "string"
+}

addedInput schema / properties / target_url / description

Added value: +"Public HTTPS x402 API endpoint to inspect before signing a payment authorization; this scan does not authorize payment."

addedOutput schema / anyOf

Added value: +[
+  {
+    "properties": {
+      "domain": {
+        "type": "string"
+      },
+      "latency_ms": {
+        "type": "number"
+      },
+      "marketplace_reputation": {
+        "description": "Public Coinbase CDP Bazaar statistics for the target host (30 days): listed, unique payers, calls, neutral demand signal.",
+        "type": "object"
+      },
+      "matched_flags": {
+        "items": {
+          "type": "string"
+        },
+        "type": "array"
+      },
+      "prompt_injection_risk": {
+        "enum": [
+          "LOW",
+          "MEDIUM",
+          "CRITICAL"
+        ],
+        "type": "string"
+      },
+      "recommendation": {
+        "type": "string"
+      },
+      "safe_to_pay": {
+        "type": "boolean"
+      },
+      "status": {
+        "type": "string"
+      },
+      "trust_score": {
+        "maximum": 100,
+        "minimum": 0,
+        "type": "integer"
+      },
+      "valid_x402_config": {
+        "type": "boolean"
+      }
+    },
+    "required": [
+      "domain",
+      "status"
+    ],
+    "type": "object"
+  },
+  {
+    "additionalProperties": true,
+    "properties": {
+      "code": {
+        "minLength": 1,
+        "type": "string"
+      },
+      "status": {
+        "maximum": 599,
+        "minimum": 400,
+        "type": "integer"
+      }
+    },
+    "required": [
+      "status",
+      "code"
+    ],
+    "type": "object"
+  }
+]

removedOutput schema / properties

Removed value: -{
-  "domain": {
-    "type": "string"
-  },
-  "latency_ms": {
-    "type": "number"
-  },
-  "matched_flags": {
-    "items": {
-      "type": "string"
-    },
-    "type": "array"
-  },
-  "prompt_injection_risk": {
-    "enum": [
-      "LOW",
-      "MEDIUM",
-      "CRITICAL"
-    ],
-    "type": "string"
-  },
-  "recommendation": {
-    "type": "string"
-  },
-  "safe_to_pay": {
-    "type": "boolean"
-  },
-  "status": {
-    "type": "string"
-  },
-  "trust_score": {
-    "maximum": 100,
-    "minimum": 0,
-    "type": "integer"
-  },
-  "valid_x402_config": {
-    "type": "boolean"
-  }
-}

removedOutput schema / required

Removed value: -[
-  "domain",
-  "status"
-]

First observedv0.1.0Oct 21, 2026

TDQS

A4.6/5.0

Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only give readOnlyHint and openWorldHint; the description adds material context beyond them: a per-call price, a free-on-unreachable pricing exception, an explicit epistemic caveat ('Heuristic, not a guarantee'), and the assurance that the scan does not itself authorize payment. These are exactly the traits an agent needs before spending money on a scan.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, all load-bearing, with the scope constraint and price front-loaded before the sibling routing. The first sentence is a heavy enumeration, but each listed check maps to a real capability rather than padding.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Output shape is covered by the output schema, so the description only needs to convey purpose, cost, limits, and alternatives — all present. An agent can decide, pay for, and interpret this call without opening anything else.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so target_url and context are already documented in the schema, and the description adds no syntax, format, or constraint detail beyond them. Baseline 3 applies because the schema carries the parameter burden.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Pre-payment check of an x402 API endpoint') and enumerates exactly what is inspected: discovery files, live 402 terms, USDC prices, latency, prompt-injection flags, and CDP Bazaar statistics. It explicitly distinguishes itself from the closest sibling by routing online shops to pre_purchase_merchant_trust_check.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is anchored to a concrete decision point ('before signing a payment authorization'), with an explicit alternative named for the adjacent use case ('Online shops: pre_purchase_merchant_trust_check'). The cost/refund rule ('$0.002; unreachable targets are free') further informs the call decision.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.